Ask HN: Did GitHub reset your account password and revoked all of your PAT?

3 points by stevematzal 3 years ago | 2 comments

Seems that many users got an email informing them that: "We’re writing to let you know that we observed suspicious activity that suggests a threat actor used a Personal Access Token (PAT) associated with your account to access private repository metadata."

nstart 3 years ago |

Yes. Still waiting for a reply from them on further audits + waiting for any kind of update from Travis since all the tokens that everyone has shared as affected have been related to Travis CI. This includes us as well.

stevematzal 3 years ago | |

I'm also waiting but for repo activity logs, in my case a PAT was "compromised" and reset by Github.